Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
File: d7tRRrULW8gaNXR6K75lKqC3Fnw.cer (raw, json)
Hash identifier: KdW/SDY6DqNg6tw2UxWjYsqIkQErkJBMmT1PRHWpYhA=
Subject key identifier: 77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DCE426CD24576D9B2E5AB0E13C8253
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198450
IP: 91.224.244.0/23
IP: 2001:67c:2134::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e4:26:cd:24:57:6d:9b:2e:5a:b0:e1:3c:82:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:7c:72:90:51:b7:09:21:2b:0f:f3:85:1f:
72:a3:7c:80:87:dd:bb:19:19:80:48:86:3f:44:bd:
40:5b:09:ca:5b:c2:0e:48:d5:86:2c:db:9d:60:8f:
e7:fd:fc:7b:3c:67:ba:4e:f0:53:8a:a9:12:a7:1b:
bc:4f:ed:8b:cb:f1:4e:11:a1:34:62:9a:4c:32:fc:
05:a4:33:83:66:78:39:3c:1d:39:b4:61:8d:24:83:
0c:a1:bb:2f:33:b4:dd:be:35:11:75:7c:9b:3c:85:
71:7e:6e:ac:c5:20:e8:d0:74:48:a4:8d:d2:84:a5:
32:36:07:8f:0f:33:17:56:18:b7:5f:f7:f8:2e:d4:
5e:fa:f3:2c:95:8a:2d:87:d9:4d:23:6a:d1:a1:b9:
e9:ce:fd:75:ba:f6:24:90:d3:05:49:96:5d:05:0a:
4d:6c:6e:25:01:cc:0a:cb:7e:14:ee:40:86:59:73:
94:e0:66:7b:12:e1:39:fd:39:92:fa:6f:11:55:69:
d8:e2:56:3c:6b:6f:dc:e4:3d:2c:c2:ac:09:04:2f:
79:64:fb:a6:be:d2:0d:ed:37:cf:1f:f1:0b:f9:6c:
36:ba:c7:73:ee:95:ae:62:f5:3b:e6:b4:9c:2a:69:
da:ed:3f:28:fc:5f:ca:4d:c7:0f:10:20:1d:0e:50:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.244.0/23
IPv6:
2001:67c:2134::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198450
Signature Algorithm: sha256WithRSAEncryption
15:a5:12:fd:c3:59:d5:93:b6:8a:54:10:b2:87:e1:c3:21:a4:
eb:cb:cc:52:ba:18:a6:74:fa:11:5b:b6:24:60:cb:1d:b6:17:
3f:e8:cb:d3:ef:f8:b4:f7:23:c8:a9:a0:1d:77:56:bb:03:af:
82:18:6c:40:8c:50:2e:1f:64:eb:3d:18:a0:fd:12:42:4d:d0:
c9:69:92:e8:1c:ad:f1:c4:50:77:fb:dc:dd:db:9d:1a:13:4c:
15:17:79:d7:a3:2c:77:b1:5f:53:24:96:91:2c:d8:19:3f:11:
9d:9d:96:74:96:d8:2d:13:3e:fc:2f:36:c6:11:33:78:34:e5:
cc:29:10:ae:4e:db:52:d8:f2:0b:57:c9:d8:ec:c7:71:a1:2f:
04:51:97:b1:12:b6:5b:a8:12:0d:20:37:bd:d4:59:96:1e:c3:
f7:cd:a9:1c:1a:b5:55:0f:5b:ae:47:5e:f1:81:23:90:a0:44:
10:d5:51:ef:a0:78:e3:f0:9b:b1:b3:2c:e7:38:30:45:98:1c:
20:e6:a4:12:69:b8:51:f1:a9:b0:a4:12:67:4f:42:29:14:40:
c2:a4:0b:ed:91:57:52:f4:a9:f6:bf:6e:9d:ea:1b:2e:b7:cf:
3d:94:eb:46:dc:09:dd:16:41:e3:39:03:94:19:2e:ec:55:9b:
8f:27:c3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:49:09 2024 by rpki-client on console-ams.rpki-client.org